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(57) Abstract 

Method for preventing unauthorized 
use of credit cards in remote payments and 
a supplemental-code card for use thereof 
are disclosed. A secret unique code list 
is provided by the credit company to the 
credit card owner for use with the credit 
card. Code lists are distributed to the 
credit card owners through any acceptable 
way, such as through automatic teller ma- 
chines (AT.M.), code cards sold in stores, 
E-mail, Fax machines, etc A copy of each 
code list is registered in an office of the 
credit company on the name of its associate 
credit card owner. Each code is for only a 
single use. The owner transmits to a credi- 
tor one code from his unique list for every 
separate remote payment, together with the 
conventional credit card data. The trans- 
mitted information is verified through a di- 
alogue between the creditor and the credit 
company, which accepts or rejects the pay- 
ment according to the verification result 
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WO 00/10140 PCT/IL99/0O443 

METHOD FOR PREVENTING UNAUTHORIZED USE OF CREDIT 
CARDS IN REMOTE PAYMENTS AND AN OPTIONAL 
SUPPLEMENTAL-CODE CARD FOR USE THEREIN 

Field of the invention 

The present invention generally relates to a method for preventing 
unauthorized use of credit cards in remote payments, and an optional 
supplemental-code card for use in said method. More specifically, 
according to the method of the present invention each remote payment is 
secured by a unique code (for only one time use) which is known only to 
the credit card owner and to the credit company. According to one 
preferred embodiment of the present invention, lists of the unique codes 
are supplied to the credit card owners through automatic-teller machines 
(hereinafter called also A.T.M). According to another preferred 
embodiment, the said unique codes are supplied to the credit card owners 
printed on supplemental-code cards, enable to supply lists of codes 
confidentially, and help the credit card owners to find out the valid code 
for each particular remote payment. According to another preferred 
embodiment the said unique codes are supplied to the credit card owners 
by any electronic media such as Internet, E-mail etc. 

Background of the invention: 

Remote payments by credit cards take a constantly growing importance 
in the world economy. In the conventional credit card remote payments, a 
credit account is charged according to instructions and credit card details 
given by the customer, without checking the physical presence of the card 
in the customer hand. Many people hesitate to use credit card, because its 
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details can be reached and exploited by unauthorized users. The credit 
cards companies have no effective way to prevent such illegal use of 
credit cards by unauthorized users. 

The purpose of the present invention is to provide fecile and simple 
method for totally secure remote payments, without changin g the 
conventional credit card held by the user. 

The method according to the present invention is for distinguishing 
between authorized and unauthorized payments, and an optional 
supplemental-code card can be used in said method together with the 
conventional credit card. (Another advantage in using the method of the 
present invention is the avoidance of mistaken payments, such as double 
charging). 

Such protection will encourage the use of credit cards in remote 
payments, while reducing the losses and the accompanying expenses 
caused by unauthorized and illegal use. 

The method according to the present invention and the optional 
supplemental-code card can be used also for regular direct credit card 
payments (i.e. involving presenting the physical credit card by its owner 
to the creditor), all according to the economic policy of the credit 
company. 

The use of the method according to the present invention will also release 
me existing psychological inhibitions in working with credit cards, thus 
increasing their request and usage. 

In the context of the present invention: 

The term "remote " - relates to a payment performed through 
communication between a credit card owner and a remote creditor, made 
by any known physical way such as electrical wires, Radio, optic fiber, 
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and through any acceptable media such as: phone, Fax machine, mail, 
interactive television or Internet 

The term "payments" - relates not only to payments, but to any remote 
activity which is involved with a transmission of valid credit card data, 
and makes use (or suited to make use) of the protection method of the 
present invention. 

The term: "remote payment" relates to any payment by credit card, using 

the card data without the presence of the physical card. 

The term "code" - relates to any combination of digits or letters. 

The term "credit company" relates to any finance or commercial entity 

supplying remote payments services. 

The term "credit card" - relates not only to a concrete physical card but 
(and especially) to the constant data of a credit account and its owner, 
which is regularly used to perform conventional remote payments. 
However, It has to be noted that according to the present invention (and 
differently from conventional credit card payments), the constant data of 
a credit card do not have to include a constant identification number, and 
all the payments can be executed using only the single use codes, together 
with any constant data predetermined by the credit company as a 
precondition for accessing the registered code list copy of the specific 
credit card owner, in the credit company office. 



Summary of the invention: 

The present invention relates to a method for preventing unauthorized 
of credit cards in remote payments comprising the steps of; 
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(a) providing by a credit company plurality of secret code lists for use 
with plurality of credit cards, wherein each list is provided to the use 
of a single owner of at least one credit card, and each code is for 
only a single use (preferably, the secret codes are generated 
randomly by an appropriate computer program, as known in the art), 
and wherein a copy of the code content of each list is registered 
(preferably stored in a credit computer) in an office of the credit 
company on the name of its authorized user (hereinafter called 
"credit card owner"). 

(b) transmitting one code from said list to a creditor by the credit card 
owner for every separate remote payment, together with any 
required conventional data of the credit card, and said single use 
code is marked by the owner in order to prevent a double use of the 
same code; 

(c ) verifying the said single code together with the other conventional 
credit card data through a dialogue (by either voice, interactive 
television, by computer, Internet, Fax machine, mail or E-mail) 
between the creditor and the credit company, and accepting or 
rejecting the payment, according to the verification result. The said 
dialogue can be done either between humans, between a human and 
a machine or automatically between machines without the 
involvement of humans, 
(d) invalidating the single code used for an accepted payment, from the 

registered code list copy in the credit company office. 
According to one preferred embodiment of the invention, the code list is 
supplied to the credit card owners through the known existing automatic 
teller machines (A.T.M.). The machine is programmed for producing lists 
of random codes (or receiving them on-line from the computer of the 
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credit company), printing them on a voucher for the user, and 
transmitting them to the credit computer of the credit company for a 
registration on the name of its authorized user, wherein all said procedure 
is executed subsequently to the detection of a physical valid 
automatic-teller card inserted by a user into the machine, and only after 
typing-on its associate secret code. 

According to another preferred embodiment the automatic teller machine 
(A.T.M.). is programmed for offering the user selecting between some 
customer options, such as: determining which of the credit card activities 
will require a supplemental-code; determining the amount of codes in the 
generated code list; etc. 

Actually, the present invention may be thought as providing an advanced 
credit card type, having a variable card number, varying for every single 
use of the card. This variable card-number is a combination of the 
conventional fixed card-number and the single use code. 
In another preferred embodiment the present invention provides a 
supplemental-code card (hereinafter called also "code card") for 
preventing unauthorized use of credit cards according to the said method, 
wherein the code card contains a list of codes for use in said method. 
Preferably, each code is covered by a removable layer of opaque material, 
for removal by the credit card owner according to a predetermined 
uncovering progression, prior to performing each remote payment. 
The covering material may be a removable sticker (preferably having a 
free end for fecile pulling out), or a scratchable printing paint, or a 
combination thereof. In the combination, the sticker is covered with a 
layer of scratchable printing paint such that once it was removed it is 
permanently damaged, thus a double use or glimpsing the code by frauds 
is prevented. This combination integrates the advantage of a sticker (i.e. 
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its racile removal) and the advantage of the scratchable paint (i.e. better 
confidence). 

It has to be noted that the method of the present invention does not rely 
on any physical code card, and the code list may be supplied to the users 
through automatic-teller machines <a.t.m.)., through an electronic wallet, 
through phone by voice, through a mailed letter, or through electrical 
means such as by fecsimile machine, by the Internet, by E-mail or by any 
other acceptable distribution way. 

According to the present invention, the code may be of one 
character/digit or more (or a combination thereof), according to the 
required protection level and to other considerations of design. 
In terms of credit card security, such 4 digit code may be considered as 
unbreakable, however there is no prevention to expand it to more than 4 
digits, or to use letters additionally to the digit decade. 
The number of codes included in one card is a matter of design. 
According to the present invention a card may include from one code up 
to several tens of codes (or more), according to the card dimensions, and 
the size of code characters (font size). The codes may be configured in 
any wanted form of columns or rows (and may be arranged either from 
one side or all sides of the card). Preferably, the code list can be designed 
to be used successively, and the computer of the credit company is 
programmed such that a non-permitted deviation from the successive 
order of the codes (there might be also a permitted deviation, all 
according to the predetermined rules of the credit-card company), 
disqualifies the whole respective code list. However, according to other 
embodiments, a non successive use of codes is permitted, provided that 
they are all of a single list, or more (as will be determined by the credit 
company). 
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The supplemental code card can be made of any material, and the codes 
may be printed or embedded on it in any known method, and in any 
predetermined configuration. 

According to another embodiment, the codes in the card are not covered, 
however the card is perforated or has a cut near each code, allowing a 
fecile removal or fecile marking of used codes, by tearing the relevant 
perforated portions of the card, in order to prevent double use of codes. 
According to one preferred embodiment of the method of the present 
invention, the codes are coupled in the office of the credit company to 
specific credit card owners, in advance. 

According to other embodiments of the method of the present invention, 
each code list has its own identification label, and the code lists are 
distributed to the credit card owners randomly, by mail, stores or other 
acceptable distribution ways, and their copies in the office are coupled to 
the record of a specific credit card owner according to a later 
communication of each owner reporting to the company the label data of 
a code list to be used. 

In order to reduce the memory space needed for storing large scale of 
code lists (especially when generated in advance for large scale 
distribution, as hereinbefore said) it is possible to generate the codes by 
means of a secret computer algorithm such that said identification label of 
each supplemental-code card is a key for the secret algorithm for 
generating the list, and such that code lists do not have to be stored in the 
computer memory (only the key label has to be coupled to the specific 
owner, wherein each code is computed momentarily for checking the 
legality of a current remote payment). 
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Detailed description of the invention: 

The present invention will be further described by figures 1-4. These 
figures are solely intend to illustrate some preferred embodiments of the 
supplemental code card and in no manner intend to limit the scope of the 
present invention. 



Brief description of the figures: 

Figure 1 illustrates a card having codes, each of four digits, covered with 
a scrathable material. 

Figure 2 illustrates a card having codes covered with stickers. 

Figure 3 illustrates a card having codes covered with stickers and a 

scratchable material, in combination. 

Figure 4 illustrates a card having codes, each of seven digits, covered 
with stickers. 

Figure 1 illustrates a supplemental code card (1) according to the present 
invention, having 15 codes arranged in three columns. Each code is of 
four digits (only for example purpose) and covered with a thin layer of a 
scratchable printing paint (5). Prior to the execution of each payment, the 
credit card owner has to scratch and remove the cover of another code, 
and to report it together with the conventional credit card data. 
In this figure, the code (2) and the next one, are already used. The valid 
code for the current payment (3), is illustrated half- scratched. The card 
has identification number which is also covered (4) with the scratchable 
material. This number is for reporting to the credit company what card 
uses the credit card owner. It is helpful in case that the credit company 
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supplies the owner with more than one code card at a time, or in case that 
the code card is acquired by the user in a store. If no identification is 
needed (i.e. one code card is supplied to a credit card owner at a time) the 
identification number is unnecessary, and the code card do not have to 
include it. 

Figure 2 illustrates a code card (6) having 15 codes, each is covered by a 
sticker (5). The code (8) and the two next ones, are exposed since they 
have already been used. The card identification (7) is also exposed. The 
valid code for the current payment (9) is illustrated during the removal of 
its sticker, which is seen half separated from the card. 

Figure 3 illustrates a code card (1 1) having 15 codes, each is covered by a 
combination of both a sticker and a removable layer. The end of the 
stickers (12) is a tag not covered by the removable layer, thus it can be 
easily pulled out (15) for removing the sticker. When a sticker is 
removed, the removable layer is permanently damaged, and the sticker 
cannot be repaired. Two used codes (14) and the next one, are exposed, 
and so is the card identification (13). 

Figure 4 illustrates a card (16) having codes, each of seven digits, covered 
with stickers. The secure given by 7 digits (from the statistical 
perspective) permits using the codes with no obligation to any 
predetermined order, thus (differently from the cards of figures 1 - 3), no 
serial numbers are printed adjacent to the stickers. A few used codes, 
which were used randomly without any successive order, are illustrated 
(those whose stickers are removed). 

The performance of a card having four digit codes as requires a 
successive order in its use, and of a card having seven digit codes as not 
requires a successive order in its use, is only for a demonstration 
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purposes. The actual requirements are subject to the considerations of the 
credit company. 

This card is illustrated without identification number, as an example for a 
card supplied directly from the credit company to a specific user, thus 
registered in the company office on the name of the user, in advance. 
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Claims : 

1 . Method for preventing unauthorized use of credit cards in remote 
payments comprising the steps of; 

(a) providing by a credit company plurality of secret code lists for 
use with plurality of credit cards, wherein each list is provided 
to the use of a single owner of at least one credit card, and each 
code is for only a single use, and wherein a copy of the code 
content of each list is registered in an office of the credit 
company on the name of its authorized user; 

(b) transmitting one code from said list to a creditor by the credit 
card owner for every separate remote payment, together with 
any required conventional data of the credit card, and said 
single use code is marked by the owner in order to prevent a 
double use with the same code; 

(c) verifying the said single code together with the other 
conventional credit card data through a dialogue between the 
creditor and the credit company, and accepting or rejecting the 
payment, according to the verification result 

(d) invalidating the single code used for an accepted payment, from 
the registered code list copy in the credit company office. 

2. Method for preventing unauthorized use of credit cards in remote 
payments according to claim 1, wherein the code list is supplied to 
the credit card owners through automatic teller machines, which are 
programmed for producing lists of random codes, or for receiving 
lists of random codes on-line from a computer of credit company, 
printing them on a voucher for the user, and transmitting them to the 
credit computer of the credit company for a registration on the name 
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of the authorized user, wherein all said procedure is executed 
subsequently to the detection of a physical valid credit inserted by a 
user into the machine, and only after typing-on its associate secret 
code. 

3. Method for preventing unauthorized use of credit cards in remote 
payments according to claim 2, wherein the automatic teller 
machines are programmed for offering the user selecting between 
customer options. 

4. Method for preventing unauthorized use of credit cards in remote 
payments according to claim 1, wherein each code list has its own 
identification label, and the code lists are distributed to the credit 
card owners randomly, by mail, stores or other acceptable 
distribution ways, and their copies in the office are coupled to 
specific credit card owner, according to a later communication of 
each owner reporting to the company the label data of a code list to 
be used. 

5. Method for preventing unauthorized use of credit cards in remote 
payments according to claim 1, wherein the codes are generated 
randomly by a computer program. 

6. Code card for preventing unauthorized use of credit cards in remote 
payments according to the method defined by claims 1, wherein the 
card contains a list of codes for use in said method, and each code is 
covered by a removable layer of opaque material, for removal by the 
credit card owner according to a predetermined uncovering 
progression, prior to performing each remote payment. 
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7. Code card for preventing unauthorized use of credit cards in remote 
payments according to claim 6 wherein the removable layer is 
scratchable printing material. 

8. Code card for preventing unauthorized use of credit cards in remote 
payments according to claim 6 wherein the removable layer is a 
sticker. 

9. Code card for preventing unauthorized use of credit cards in remote 
payments according to claim 6 wherein the removable layer is a 
combination of a sticker covered by a scratchable printing material 
and having free tags for facile removal. 

10. Code card for preventing unauthorized use of credit cards in remote 
payments according to the method defined by claims 1, wherein the 
card contains a list of codes for use in said method, wherein the card 
is perforated or has a cut near each code, allowing a facile removal 
or facile marking of used codes by tearing the relevant perforated 
portions of the card. 

11. Code card for preventing unauthorized use of credit cards in remote 
payments substantially as hereinbefore described and illustrated. 

12. Method for preventing unauthorized use of credit cards in remote 
payments substantially as hereinbefore described. 
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